MAL-2025-156392 Malicious code in inal-poke118 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 44fa7785fb42e655f0626d151f718e64b13092a07ce62732bb8c15cd8c77ab94 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158804 Malicious code in lookingan-namala88 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 61be1ee728625253931eec5158f8508abbefa7cdc984203f9c922c6d50129393 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-164604 Malicious code in ramadan-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6fb414a4e4f3400f26f913e17c2175030b1acc9ff3e98720adea013d3f61db31 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158174 Malicious code in lintang-tea17 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 1df5a7d305121e702e8ab75db490e2f7ac5a95acd0e244af7ece2c9f1a5f5e6d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161278 Malicious code in nabila-poke76 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 710dbd8a246af9479e87d7c5dfb2ae8ef1ac95bc22e7a55bfec7714df659da27 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152221 Malicious code in alfiansyah-poke108 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 05fc47036a3c582ee14e846d7936de357df78600003adb4071e58eb742658302 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168908 Malicious code in technical-alonbio-toli (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f3ff8558c3aa01d54422862d8e610da5b40ec57f36455ee5fc58a455a5df3a5a This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161253 Malicious code in nabila-poke53 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 518f3dd4d1add950ed09a2d5363c8c5aaf6076c96bbda6b285ba7cd69c40dc78 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-165788 Malicious code in sau-nakiio-ups012uszzgxgfiek (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector b1064e4f5756187df74246aa401ce6f9d884efff7c6c10e157eafae6ab7d0cfa This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-150568 Malicious code in @miptaa02/dfzg (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 059478075ae0e0c22450eb025d60c605b092c6ec634768f5abe7ae00a4e46001 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168441 Malicious code in tealove-nanami13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6b0c6f2043256461201c942fd26e688413b0034ca1870fba4a04c99d7e239074 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-168474 Malicious code in tealove-nanami44 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector f80bb71f32afa9869142884d0ca99088f49119b5879c9643f6f9e29cfde46ea4 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-163287 Malicious code in nokire-nanali34 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 7a28ea9cb6e9cd044f493dfa0b0ddd994a445ac2e49ebccb810c834cdbe180be This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-152370 Malicious code in alita-poke59 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 5dde1ab3194899022f51b0ef4eb0163e66f49c1b17494e9c7a24d1374e77436d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-162014 Malicious code in nasution-poke27 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 69e7a94a87800960fd832509d8e0f14e9a58adca5618b1b8e8604cea9fb467a3 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-153478 Malicious code in avomainah-fagais-ogya (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 6ef90e2ed2f346416570ce7eddece18e28acac6b41389c54fe87abea859424c5 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-158497 Malicious code in lookingan-nalako83 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 562ca69c8987f3f856341e568677e6fc3b6d4cd6f5703e4610bb1bf2187d9598 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166616 Malicious code in syahmuda-poke2 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector e13153a426637b27d6f93aab3fccce9572c6b6bd3cee53279805007789e9b157 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-161903 Malicious code in nasrul-poke16 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector dea86abc943e37cc7f8b5dcfc064499df553b316548d70669a934b03b3b23ece This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

MAL-2025-166518 Malicious code in syahlan-poke20 (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 079aaa60d9b61e7c1585d6cd8ca325a6bb104e39a43cc8187fa44fd1b3ce6679 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...